USNH Phishing Simulation - Giveaway

USNH Phishing Simulation - Giveaway

This was a phishing simulation by the USNH Cybersecurity Operations Team. 

Rather than stealing information like a cybercriminal would, we have re-directed you to the this page. Below is the message and some tips on how to help identify phishing.

Don't worry, your credentials were not compromised during this simulation.

And It's Okay! Let's learn from this.

 

Phishing Message:

Subject: You’ve been selected for a student giveaway!

Sender: USNH Prize Team <universitypromotions@usnh.edu.com>

Hi,
 
As part of a giveaway, your email was randomly selected to receive a prize.
 
Click the following link to confirm your entry and view prize details.
 
Responses are limited, so please review as soon as possible.
 
Thank you,
 
University Promotions Group

Tips to Help Identify Phishing

The external tag: While USNH does apply a warning banner for messages from external senders, this is not consistent with that banner. 

Sender From Name: USNH Prize Team <universitypromotions@usnh.edu.com> - Phishing messages will often attempt to make the email address appear legitimate. This is especially true when reviewing messages on mobile devices. Always expand the sender from field to review the actual email address. Never assume the Display Name is the actual sender!

Hover over links: The simple act of hovering over the link can reveal the true URL that may be hidden or obfuscated. Use this to your advantage to see the URL before ever clicking! If you ever receive a message you believe could be legitimate but are not certain (ie., from your bank) always defer to typing the known good url into your browser instead of clicking a link. Expect URLs or attachments in unexpected messages to always be malicious.

Did you know? Even by simply clicking on a link in a phishing email you can unintentionally disclose information. 

 

------------------------------------------------

If you ever have concerns that a message may be phishing, please do not hesitate to contact the following resources:

USNH Cybersecurity Operations - IT.Security@usnh.edu - USNH Cybersecurity

USNH Technology Help Desk/Help Central -

USNH Phishbowl News - Find information on how to report a message using the built-in report function in Outlook. In addition to reporting the message to the USNH Cybersecurity Team, this also helps train Microsoft to better detect phishing and helps protect the USNH community!

Phishing Awareness at USNH - Provides more information about phishing and why USNH is a target for phishing.